(19) 



(12) 



I aiuu mm in iiai iiui iiui ma niii inu iiui luu iiiiii iiiiuii iiii 

European Pj^X Office 

Office europSBh des brevets (11) "EP 0 876 067 A1 

EUROPEAN PATENT APPLICATION 



/nil European P||ttt i 
Office europKn d 



(43) Date of publication: 

04.1 1 .1 998 Bulletin 1 998/45 

(21) Application number: 97440042.6 

(22) Date of filing: 30.04.1997 



(51) lntCI«: H04Q3/00, H04Q 3/62 



(84) Designated Contracting States: 
ATCH DE ES FR GB IT LI SE 

(71) Applicant: 

ALCATEL ALSTHOM COMPAGNIE GENERALE 

D'ELECTRICITE 

75008 Paris (FR) 

(72) Inventors: 

• Slegmund, Gerd 
70435 Stuttgart (DE) 



• Felbecker-Janho, Heike 
70825 Korntal-MOntilngen (DE) 

(74) Representative: 

Schatzle, Albin, DipL-Phys. 
Alcatel Alsthom 

Intellectual Property Department, 
Postfach 30 09 29 
70449 Stuttgart (DE) 



(54) Virtual private networks with common destination 

(57) In known telecommunication systems a combi- 
nation of a switch like a Sen^ice Switching Point or SSP 
and processor means like a Service Control Point or 
SCP can be used for providing several virtual private 
networks, which are completely independent By allow- 
ing at least one destination of a virtual private number of 
one of said virtual private networks to correspond with a 
destination of a virtual private number of an other virtual 
private network, the number of user possibilities is 
increased, like for example two companies each one of 
them having its own virtual private network and both 
having the possibility to work with the same secretary 
who works at home or with for example a secretary 
company situated at another location. 
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Description 




A. Background of the invention 

The invention relates to a telecommunication sys- 
tem for providing virtual private networks and compris- 
ing processor means for controlling a switch for making 
connections between origins and destinations, which 
processor means 

- in response to a first virtual private number belong- 
ing to a first virtual private network, controls said 
switch for coupling a first origin to a first destination, 
and 

in response to a further first virtual private number 
belonging to said first virtual private network, con- 
trols said switch for coupling said first origin to a fur- 
ther first destination. 

in response to a second virtual private number 
belonging to a second virtual private network, con- 
trolls said switch for coupling a second origin to a 
second destination, and 

- in response to a further second virtual private 
number belonging to said second virtual private 
networK controlls said switch for coupling said sec- 
ond origin to a further second destination. 

Such a telecommunication system Is of common 
general knowledge and comprises for example a Serv- 
ice Switching Point or SSP functioning as said switch 
and comprises for example a Service Control Point or 
SCP functioning as said processor means. In response 
to a first virtual private number like for example XY1 
belonging to a first virtual private network XY, said 
switch couples a first origin OR-1 to a first destination 
DE-XY1 , and in response to a further first virtual private 
number XY2 belonging to said first virtual private net- 
work XY, said switch couples said first origin OR-1 to a 
further first destination DE-XY2. In response to a sec- 
ond virtual private number UW1 belonging to a second 
virtual private network UW, said switch couples a sec- 
ond origin OR-2 to a second destination DE-UW1, and 
in response to a further second virtual private number 
UW2 belonging to said second virtual private network 
UW. said switch couples said second origin OR-2 to a 
further second destination DE-UW2. So. a con^ination 
of said SSP and SCP is used to provide two or more vir- 
tual private networks, which are completely independ- 
ent. Said SSP is further used, of course, for switching 
ordinary telephone calls, whereby in response to an 
ordinary telephone number ABCDEFQH a certain origin 
is coupled to a certain destination. 

Said known telecommunication system is disadvan- 
tageous because of offering only a few user possibili- 
ties. 



B. Summary of the inv^^n 

It is an object of the invention, inter alia, to provide 
a telecommunication system as described in the pream- 

5 bie which offers more user possibilities. 

Thereto, the telecommunication system according 
to the invention is characterised in that the first destina- 
tion and the second destination are the same, and that 
the further first destination and the further second desti- 

10 nation are different 

By allowing at least one destination defined by said 
first virtual private number belonging to said first virtual 
private network and originating from said first origin and 
at least one destination defined by said second virtual 

15 private number belonging to said second virtual private 
network and originating from said second origin to be 
the same, the possibility has been created of reaching 
the same destination from different virtual private net- 
works, each one of them operating via said combination 

20 of processor means and switch, by using said virtual pri- 
vate numbers, which will usually be different per virtual 
private network, but which could also be the same. 

The invention solves the problem of increasing the 
number of user possibilities in a known telecommunica- 

25 tion system by providing said processor means with 
software allowing said destinations to be the same. At 
least a part of the inventivity of this solution is situated in 
overcoming the prejudice that two or more virtual pri- 
vate networks operating via a combination of processor 

30 means and switch should remain completely separated. 
From US 5,345,502 it is known to couple different 
virtual private networks in a very advantageous way, 
each one of said different virtual private networks hav- 
ing its own processor and its own switch. This granted 

35 ALCATEL US-patent does not disclose the increase- 
ment of the number of user possibilities for different vir- 
tual private networks, each one of them operating via 
said combination of processor means and switch. In 
view of this it should be observed that according to the 

40 invention said processor means coukJ comprise several 
processors and that said switch could comprise several 
switches. But contrary to US 5.345.502, the virtual pri- 
vate networks according to the invention do not have 
their own processor and their own switch. 

45 At said same destination, for example the home 
location of a secretary working for different companies, 
which location can be reached from different virtual pri- 
vate networks, each one of them belonging to one of 
said companies, preferably the possibility exists of call- 
so ing each one of said companies by also using virtual pri- 
vate numbers instead of ordinay telephone numbers. 

A first embodiment of the telecomnfunication sys- 
tem according to the invention is characterised in that in 
response to said further second virtual private number 

55 originating from said first origin there is no coupling of 
said first origin to said further second destination and in 
response to said further first virtual private number orig- 
inating from said second origin there is no coupling of 
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8aid second origin to said furth^|j||t destination. 

When using said further ^l>nd virtual private 
number inside said first virtual private networK and 
when using said further first virtual private number 
inside said second virtual private network, the destina- s 
tions as expected (when using said further second vir- 
tual private number inside said second virtual private 
network, and when using said further first virtual private 
number inside said first virtual private networl^ will in 
general not be reached. 

A second embodiment of the telecommunication 
system according to the invention is characterised in 
that said telecommunication system comprises 

• a first input connectable to said first origin for is 
receiving said first virtual private number belonging 
to said f irst virtual private network, in response to 
which said switch couples said first input to a first 
output connectable to said first destination, and for 
receiving said further first virtual private number 20 
belonging to said first virtual private network, in 
response to which said switch couples said first 
input to a further first output connectable to said fur- 
ther first destination, and 

- a second input connectable to said second origin 25 
for receiving said second virtual private number 
belonging to said second virtual private network, in 
response to which said switch couples said second 
input to a second output connectable to said sec- 
ond destination, and for receiving said further sec- 30 
ond virtual private number belonging to said 
second virtual private network, in response to 
which said switch couples said second input to a 
further second output connectable to said further 
second destination. 

A third embodiment of the telecommunication sys- 
tem according to the invention is characterised in that 
said processor means comprise 

40 

- detection means coupled to said first input and to 
said second input for detecting said first virtual pri- 
vate number and said further first virtual private 
number and said second virtual private number and 
said further second virtual private number, and 4S 
generation means coupled to said detection means 
and to said switch for generating, in response to a 
detection of said first virtual private number origi- 
nating from said first input, a first control signal des- 
tined for said switch, and in response to a detection so 
of said further first virtual private number originating 
from said first input, a further first control signal 
destined for said switch, and in response to a detec- 
tion of said second virtual private number originat- 
ing from said second input, a second control signal ss 
destined for said switch, and in response to a detec- 
tion of said further second virtual private number 
originating from said second input, a further second 



control signal destined for said switch, and in 
response to a^Bction of said further first virtual 
private number onginating from said second input, 
a third control signal destined for said switch, and in 
response to a detection of said further second vir- 
tual private number originating from said first input, 
a fourth control signal destined for said switch, with 
said first control signal and said second control sig- 
nal defining the same destination, and with said fur- 
ther first control signal and said further second 
control signal and said third control signal and said 
fourth control signal being mutually different. 

The invention further relates to processor means 
for controlling a switch for making connections between 
origins and destinations for provWing virtual private net- 
works in a telecommunication system as described 
above, which processor means 

in response to a first virtual private number belong- 
ing to a first virtual private network, controlls said 
switch for coupling a first origin to a first destination, 
and 

. in response to a further first virtual private number 
belonging to said first virtual private network, con- 
trolls said switch for coupling said first origin to a 
further first destination. 

in response to a second virtual private number 
belonging to a second virtual private networK con- 
trolls said switch for coupling a second origin to a 
second destination, and 

- in response to a further second virtual private 
nunr^er belonging to said second virtual private 
network, controls said switch for coupling said sec- 
ond origin to a further second destination. 

K is a further object of the invention, inter alia, to 
provide processor means as described above which 
offer more user possibilities. 

Thereto, the processor means according to the 
invention are characterised in that the first destination 
and the second destination are the same, and that the 
further first destination and the further second destina- 
tion are different. 

A first embodiment of the processor means accord- 
ing to the invention is characterised in that in response 
to said further second virtual private number originating 
from said first origin there is no coupling of saki first ori- 
gin to said further second destination and in response to 
seiid further first virtual private number originating from 
said second origin there is no coupling of said second 
origin to saki further first destination. 

A second embodiment of the processor means 
according to the invention is characterised in that said 
switch comprises 

- a first input connectable to said first origin for 
receiving said first virtual private number belonging 
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to said first virtual private netvvMj^in response to 
which said switch couples saic^PI input to a first 
output connectaUe to said first destination, and for 
receiving said further first virtual private number 
belonging to said first virtual private network, in 5 
response to which said switch couples said first 
input to a further first output conneclable to said fur- 
ther first destination, and 

- a second input conneclable to said second origin 

for receiving said second virtual private number 10 
belonging to said second virtual private network, in 
response to which said switch couples said second 
Input to a second output conneclable to said sec- 
ond destination, and for receiving said further sec- 
ond virtual private number belonging to said is 
second virtual private network, in response to 
which said switch couples said second input to a 
further second output connectable to said further 
second destination. 

20 

A third embodiment of the processor means 
according to the invention is characterised in that said 
processor means conprise 

- detection means coupled to said first input and to 2s 
said second input for detecting said first virtual pri- 
vate number and said further first virtual private 
number and said second virtual private number and 
said further second virtual private number, £ind 
generation means coupled to said detection means so 
and to said switch for generating, in response to a 
detection of said first virtual private number origi- 
nating from said first input a first control signal des- 
tined for said switch, and in response to a detection 

of said further first virtual private number originating 3S 
from said first input, a further first control signal 
destined for said switch, and in response to a detec- 
tion of said second virtual private number originat- 
ing from said second input a second control signal 
destined for said switch, and in response to a detec- 40 
tion of said further second virtual private number 
originating from said second input, a further second 
control signal destined for said switch, and in 
response to a detection of said further first virtual 
private number originating from said second input, 45 
a third control signal destined for said switch, and in 
response to a detection of said further second vir- 
tual private number originating from said first input, 
a fourth control signal destined for said switch, with 
said first control signal and said second control sig- so 
nal defining the same destination, and with said fur- 
ther first control signal and said further second 
control signal and said third control signal and said 
fourth control signal being mutually different 

55 

The invention yet further relates to a method for 
making connections between origins and destinations 
via a switch in a telecommunication system for providing 



virtual private networi^^nd comprising said switch, 
which method compris^Be steps of 

- in response to a first virtual private number belong- 
ing to a first virtual private networK controlling said 
switch for coupling a first origin to a first destination, 
and 

- in response to a further first virtual private number 
belonging to said first virtual private network, con- 
trolling said switch for coupling said first origin to a 
further first destination, 

in response to a second virtual private number 
belonging to a second virtual private network, con- 
trolling saki switch for coupling a second origin to a 
second destination, and 

in response to a further second virtual private 
number belonging to sakJ second virtual private 
networtc. controlling said switch for coupling said 
second origin to a further second destination. 

The method according to the invention is character- 
ised in that the first destination and the second destina- 
tion are the same, and that the further first destination 
and the further second destination are different. 

A first embodiment of the method according to the 
invention is characterised in that in response to said fur- 
ther second virtual private number originating from said 
first origin there is no coupling of said first origin to said 
further second destination and in response to said fur- 
ther first virtual private number originating from said 
second origin there is no coupling of said second origin 
to said further first destination. 

C. References 

- US 5,345.502 

All references including further references cited 
with respect to and/or inside said references are consid- 
ered to be incorporated in this patent application. 

D. Description of the drawings 

The invention will be explained in greater detail at 
the hand of an embodiment disclosed in the drawing, 
whereby 

figure 1 discloses an embodiment of the teleconr>- 
munication system according to the invention com- 
prising processor means according to the invention 
and a switch. 

The telecommunication system according to the 
invention as disclosed in figure 1 comprises processor 
means 1 according to the invention and a switch 5. Said 
processor means 1 are provided with a processor 2, 
detection means 3 and generation means 4. Processor 
2 is coupled via control connections 15 to detection 
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means 3 and is coupled via con||Lconnections 16 to 
generation means 4 and is coupl^Pia control connec- 
tions 12 to switch 5. Detection means 3 are coupled via 
control connections 17 to generation means 4 and are 
coupled via control connections 1 1 and 14 to switch 5. 
Generation means 4 are coupled via control connec- 
tions 13 to switch 5. Switch 5 comprises a first detector 
6, a coupler 7 and a second detector 8. Said first detec- 
tor 6 conprises at its left side several in/outputs, of 
which the first eight in/outputs are numbered 50-57 and 
of which the last in/output is numbered 58. and com- 
prises at its right side several in/outputs coupled to cou- 
pler 7, of which the first eight in/outputs are numbered 
60-67 and of which the last in/output is numbered 68. 
and comprises control in/outputs coupled to control 
connections 1 1 . Said second detector 8 comprises at its 
left side several in/outputs coupled to coupler 7 of which 
the sixth to eleventh in/outputs are nunrtoered 70-75 and 
of which the last but one in/oulput is numbered 76. and 
comprises at its right side several in/outputs, of which 
the sixth to eleventh in/outputs are numbered 80-85 and 
of which the last but one in/output is numbered 86. and 
comprises control in/outputs coupled to control connec- 
tions 14. Coupler 7 further comprises control in/outputs 
coupled to control connections 12 and to control con- 
nections 13. 

The telecommunication system as disclosed in fig- 
ure 1 offers the following possibilities. In/oulputs 50-57 
are for example coupled to telephones of a first com- 
pany having a first virtual private network XY. In/outputs 
80-85 are for example coupled to telephones of a sec- 
ond company having a second virtual private network 
UW. In/output 58 is for exanple coupled to a telephone 
of a third company not having a virtual private network 
and in/output 86 is for example coupled to a telephone 
of a secretary who works at home or to a telephone of a 
secretary company. An first employee working for said 
first company and for example using the telephone con- 
nected to in/output 50 (in this case a first origin OR-1) 
dials for example a first virtual private number XY8 to 
call the secretary having the telephone connected to 
in/output 86 (in this case a first destination DE-XY8) and 
dials for example a further first virtual private nunrUser 
XY5 to call his colleague having the telephone con- 
nected to in/output 55 (in this case a further first desti- 
nation DE-XY5) and dials for example an ordinary 
number ABCDEFGH to call the third company having 
the telephone connected to in/output 58 (in this case an 
other destination DE-ABCDEFGH). A second employee 
working for said second conpany and for example 
using the telephone connected to in/output 80 (in this 
case a second origin OR-2) dials for example a second 
virtual private number UW9 to call the secretary having 
the telephone connected to in/output 86 (in this case a 
second destination DE-UW9) and dials for example a 
further second virtual private number UW3 to call his 
colleague having the telephone connected to in/oulput 
83 (in this case a further second destination DE-UW3) 



and dials for exampl eJbe ordinary number ABCDEFGH 
to call the third co^ny having the telephone con- 
nected to in/output 5^n this case an other destination 
DE-ABCDEFGH). These possibilities are realised as 

5 follows. 

When saki first employee uses the telephone con- 
nected to in/output 50 (said first origin OR-1) and dials 
the number )CY8, this number XY8 anrives at first detec- 
tor 6. which recognises said number XY8 as a virtual 
10 private number belonging to the virtual private network 
XY, and sends saW number XY8 to processor means 1 
via control connections 1 1 . In processor means 1 detec- 
tor means 3 detect said number XY8, and inform proc- 
essor 2 via control connections 15 about said detection. 
75 and supply at least a part of sakl number XY8 via con- 
trol connections 17 to generator means 4. which, in 
response to command signals originating from proces- 
sor 2 via control connections 16, generate a first control 
signal to be supplied to coupler 7 via control connec- 
20 tions 13. In response to conrvnand signals originating 
from processor 2 via control connections 12 and said 
first control signal, coupler 7 couples in/output 60 to 
in/output 76, as a consequence of which in/output 50 is 
connected with in/output 86. In this manner, saki first 
25 employee at sakJ first origin OR-1 working for said first 
company having said first virtual private network XY can 
communicate with said secretary at sakl first destination 
DE-XY8 by dialing said first virtual private number XY8. 
When saU first enployee uses the telephone con- 
30 nected to in/output 50 (said first origin OR-1) and dials 
the number XY5, this number XY5 arives at first detec- 
tor 6, which recognises said number XY5 as a virtual 
private number belonging to the virtual private network 
XY, and sends said number XY5 to processor means 1 
35 via control connections 1 1 . In processor means 1 detec- 
tor means 3 detect said number XY5, and inform proc- 
essor 2 via control connections 15 about said detection, 
and supply at least a part of said number XY5 via con- 
trol connections 17 to generator means 4, which, in 
40 response to command signals originating from proces- 
sor 2 via control connections 16, generate a further first 
control signal to be supplied to coupler 7 via control con- 
nections 13. In response to command signals originat- 
ing from processor 2 via control connections 12 and 
45 said further first control signal, coupler 7 couples in/out- 
put 60 to in/output 65. as a consequence of which 
in/output 50 is connected with in/output 55. In this man- 
ner, said first employee at saki first origin OR-1 working 
for said first company having said first virtual private 
50 network XY can communicate with his colleague at said 
further first destination DE-XY5 by dialling saki further 
f irst virtual private number XY5. 

When said first employee uses the telephone con- 
nected to in/output 50 (said first origin OR-1) and dials 
55 the number ABCDEFGH. this number ABCDEFGH 
anrives at first detector 6. which recognises sakl number 
ABCDEFGH as an ordinary number, in response to 
which coupler 7 couples in/output 60 to in/output 68 
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(with the use of processor means^M' without using 
processor means 1), as a consequ^^af which in/out- 
put 50 is connected with in/output 58. In this manner, 
said first employee at said first origin OR-1 working for 
said first company having said first virtual private net- 
work XY can communicate with said third company at 
said other destination DE-ABCDEFGH by dialling said 
ordinary number ABCDEFGH. 

When said second employee uses the telephone 
connected to in/output 80 (said second origin OR-2) 
and dials the number UW9, this number UW9 arrives at 
second detector 8, which recognises said number UW9 
as a virtual private number belonging to the virtual pri- 
vate network UW. and sends said number UW9 to proc- 
essor means 1 via control connections 1 1. In processor 
means 1 detector means 3 detect said number UW9, 
and inform processor 2 via control connections 1 5 about 
said detection, and supply at least a part of said number 
UW9 via control connections 17 to generator means 4, 
which, in response to command signals originating from 
processor 2 via control connections 16, generate a sec- 
ond control signal to be supplied to coupler 7 via control 
connections 13. In response to command signals origi- 
nating from processor 2 via control connections 12 and 
said second control signal, coupler 7 couples in/output 
70 to in/output 76. as a consequence of which in/output 
80 is connected with in/output 86. In this manner, said 
second employee at said second origin OR-2 working 
for said second company having said second virtual pri- 
vate networi^ UW can communicate with said secretary 
at said second destination DE-UW9 by dialing said sec- 
ond virtual private number UW9. 

When said second employee uses the telephone 
connected to in/output 80 (said second origin OR-2) 
and dials the number UW3, this number UW3 arrives at 
second detector 8, which recognises said number UW3 
as a virtual private number belonging to the virtual pri- 
vate network UW, and sends said number UW3 to proc- 
essor means 1 via control coinections 1 1 . In processor 
means 1 detector means 3 detect said number UW3, 
and inform processor 2 via control connections 15 about 
said detection, and supply at least a part of said number 
UW3 via control connections 17 to generator means 4, 
which, in response to command signals originating from 
processor 2 via control connections 16, generate a fur- 
ther second control signal to be supplied to coupler 7 via 
control connections 13. In response to command sig- 
nals originating from processor 2 via control connec- 
tions 12 and said further second control signal, coupler 
7 couples in/output 70 to in/output 73. as a conse- 
quence of which in/output 80 is connected with in/output 
83. In this nr>anner, said second employee at said sec- 
ond origin OR-2 working for said second company hav- 
ing said second virtual private network UW can 
communicate with his colleague at said further second 
destination DE-UW3 by dialing said further second vir- 
tual private number UW3. 

When said second employee uses the telephone 



connected to in/outpu t Jg ( said second origin OR-2) 
and dials the nun^er ^pDEFGH. this number ABC- 
DEFGH arrives at seconKetector 8, which recognises 
said mtrher ABCDEFGH as an ordinary number, in 

5 response to which coupler 7 couples in/output 70 to 
in/output 68 (with the use of processor means 1 or with- 
out using processor means 1). as a consequence of 
which in/output 80 is connected with in/output 58. In this 
manner, said second employee at said second origin 

10 OR-2 wortdng for said second company having said 
second virtual private network UW can communicate 
with said third company at said other destination DE- 
ABCDEFGH by dialling said ordinary number ABCDE- 
FGH. 

IS Summarising, with the telecommunication system 
accorcling to the invention as disclosed in figure 1 com- 
prising the processor means 1 according to the inven- 
tion more user possibilities are offered due to the fact 
that the first destination DE-XY8 and the second desti- 

20 nation DE-UW9 are the same (both destinations being 
the telephone coupled to in/output 86), with the further 
first destination DE-XY5 and the further second destina- 
tion DE-UW3 being different. By allowing at least one 
destination DE-XY8 defined by said first virtual private 

25 number XY-8 belonging to said first virtual private net- 
work XY and originating from said first origin OR-1 and 
at least one destination DE-UW9 delined by said sec- 
ond virtual private nunrtoer UW9 belonging to said sec- 
ond virtual private networic UW and originating from 

30 said second origin OR-2 to be the same, the possibility 
has been created of reaching the same destination from 
different virtual private networks, each one of them 
operating via said combination of processor means 1 
and switch 5, by using said virtual private numbers XY-8 

35 and UW-9, which will usually be different per virtual pri- 
vate network, but which could also be the same. The 
invention solves the problem of inaeasing the number 
of user possibilities in a known telecommunication sys- 
tem by providing said processor means 1 with software 

40 allowing said destinations DE-XY8 and DE-UW9 to be 
the same. At least a part of the inventivity of this solution 
is situated in overcoming the prejudice that two or more 
virtual private networks XY and UW operating via a 
combination of processor means 1 and switch 5 should 

45 remain completely separated. 

At said same destination DE-XY8 or DE-UW9. for 
exanple the home location of a secretary working for 
different companies, which location can be reached 
from different virtual private networks XY and UW, each 

so one of them belonging to one of said companies, prefer- 
ably the possibility exists of calling each one of said 
companies by also using virtual private numbers 
instead of ordinay telephone numbers. In other words, 
said secretary should preferably use the telephone con- 

55 nected to in/output 86 and dial for example the respec- 
tive virtual private numbers XY-1 and UW-2 for being 
connected to ttie respective in/outputs 51 and 81 in a 
way as described above, instead of having to dial ordi- 
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nary telephone numbers. 

Of course, when said first Uroyee dials said fur- 
ther second virtual private number UW3 inside said first 
virtual private network XY, and when said second 
employee dials said further first virtual private number 
XY5 inside said second virtual private network UW, the 
destinations as expected (DE-UW3 when using said fur- 
ther second virtual private number UW3 inside said sec- 
ond virtual private network UW. and DE-XY5 when 
using said further first virtual private number XY5 inside 
said first virtual private network XY) will in general not 
be reached. 

According to a further embodiment of the telecom- 
munication system according to the invention, said tele- 
communication system comprises 

- a first input (50) connectable to said first origin OR- 
1 for receiving said first virtual private number XY-8 
belonging to said first virtual private network XY, in 
response to which said switch 5 couples said first 
input (50) to a first output (86) connectable to said 
first destination DE-XY8, and for receiving said fur- 
ther first virtual private number XY-5 belonging to 
said first virtual private network XY, in response to 
which which it arrives, etc. Of course, at least a part 
of processor means 1 and at least a part of switch 5 
could be integrated, without leaving the scope of 
the invention. 

When both enployees of both different companies 
at the same time try to contact said secretary, only one 
of them will succeed, unless said secretary has got two 
or more lines and devices coupled to said switch, and/or 
said secretary has got the possibility of switching 
between calls and/or of answering second calls. In case 
ISDN is used, further possibilities known to a person 
skilled in the art are present. The invention further does 
not exclude the use of all possible speech and/or data 
equipment and does not exclude the use of alt possible 
video equipment, because of said invention in general 
dealing with the partial overlap of virtual private net- 
works to be provided via one combination of processing 
means and switching means, with said processing 
means possibly comprising several processors and with 
said switching means possibly comprising several 
switches, control signal destined for said switch 5, with 
said first control signal and said second control signal 
defining the same destination DE-XY8 - DE-UW9, and 
with said further first control signal and said further sec- 
ond control signal and said third control signal and said 
fourth control signal being mutually different (due to the 
fact that said further first control signal defines destina- 
tion DE-XY5 and that said further second control signal 
defines a different destination DE-UW3 and that said 
third control signal and said fourth control in general 
either do not define a destination or define further differ- 
ent destinations). 

The term input does not exclude the possibility of 



also being an outpuL and the term output does not 
exclude the possib^^f also being an input The term 
in/output should be read as input and/or output. Said 
invention should not be restricted to fixed networks but 

5 could also be used for mobile networks, and does fur- 
ther not exclude the presence of further exchanges 
between at least two of the features origin, switch 5, 
processing means 1 and destination. 

The content of processing means 1 and of switch 5 

10 is just an examplary entjodiment which could be altered 
in many ways without leaving the scope of the invention. 
For exanple, processor 2 could be integrated with 
detection means 3, or with generation means 4. or a 
part of processor 2 could be integrated with detection 

IS means 3 and an other part of processor 2 could be inte- 
grated with generation means 4. Further, coupler 7 
could be fully controlled by either processor 2 only or by 
generation means 4 only, and/or could also be control- 
led by detection means 3. The content of switch 5 is of 

20 conwron general knowledge to a person skilled in the 
art as well as the functioning of first detector 6 and of 
second detector 8 with respect to dealing with virtual 
private numbers and ordinary numbers. For exanple 
the detection of virtual private numbers couU be real- 
ms ised by autonnatically adding a code to a virtual private 
number at the origin or between origin and witch, 
which code couki be detected, and/or by detecting a vir- 
tual private number having a certain exclusive charac- 
teristic, which characteristic couU be detected, and/or 

30 by detecting a virtual private number in combination 
with the in/output at which it arrives, etc. Of course, at 
least a part of processor means 1 and at least a part of 
switch 5 could be integrated, without leaving the scope 
of the invention. 

3S When both employees of both different companies 
at the same time try to contact said secretary, only one 
of them will succeed, unless said secretary has got two 
or more lines and devices coupled to said switch, and/or 
said secretary has got the possibility of switching 

40 between calls and/or of answering second calls. In case 
ISDN is used, further possibilities known to a person 
skilled in the art are present The invention further does 
not exclude the use of all possible speech and/or data 
equipment, and does not exclude the use of all possible 

46 video equipment because of said invention in general 
dealing with the partial overiap of virtual private net- 
works to be provided via one combination of processing 
means and switching means, with said processing 
means possibly comprising several processors and with 

so said switching means possibly comprising several 
switches. 

Claims 

ss 1 . Telecommunication system for providing virtual pri- 
vate networks and comprising processor means for 
controlling a switch for making connections 
between origins and destinations, which processor 
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means 




in response to a first virtual private number 
belonging to a first virtual private networK con- 4. 
trols said switch for coupling a first origin to a s 
first destination, and 

- in response to a further first virtual private 
number belonging to said first virtual private 
network, controlls said switch for coupling said 
first origin to a further first destination, 10 

- in response to a second virtual private number 
belonging to a second virtual private network, 
controlls said switch for coupling a second ori- 
gin to a second destination, and 

- in response to a further second virtual private is 
number belonging to said second virtual pri- 
vate network, controlls said ^tch for coi^ling 
said second origin to a further second destina- 
tion, 

characterised in that the first destination and 20 
the second destination are the same, and that 
the further first destination and the further sec- 
ond destination are different. 

Telecommunication system as claimed in claim 1, 2s 
characterised in that in response to said further 
second virtual private number originating from said 
first origin there is no coupling of said first origin to 
said further second destination and in response to 
said further first virtual private number originating 30 
from said second origin there is no coupling of said 
second origin to said further first destination. 

Telecommunication system as claimed in claim 1 or 
2, characterised in that said telecommunication 35 
system conprises 

- a first input connectaUe to said first origin for 
receiving said first virtual private rujmber 
belonging to said first virtual private network, in 40 
response to which said switch couples said first 
input to a first output connectable to said first 
destination, and for receiving said further first 5. 
virtual private number belonging to said first 
virtual private network, in response to which 45 
said switch couples said first input to a further 

first output connectable to said further first des- 
tination, and 

- a second input connectable to said second ori- 
gin for receiving said second virtual private so 
number belonging to said second virtual pri- 
vate network, in response to which said switch 
coi4)tes said second input to a second output 
connectable to said second destination, and for 
receiving said further second virtual private ss 
number belonging to said second virtual pri- 
vate network, in response to which said switch 
couples said second input to a further second 



output connect^e to said further second des- 
tination. 

Telecomnujnication system as claimed in daim 3. 
characterised in that said processor means com- 
prise 

detection means cou^ed to said first input and 
to said second input for detecting said f irst vir- 
tual private number and said further first virtual 
private number and said second virtual private 
number and said further second virtual private 
number, and 

generation means coipled to said detection 
means and to swd switch for generating, in 
response to a detection of said first virtual pri- 
vate number originating from said first input, a 
first control signal destined for said switch, and 
in response to a detection of said further first 
virtual private number originating from said first 
input, a further first control signal destined for 
said switch, and in response to a detection of 
said second virtual private number originating 
from said second input, a second control signal 
destined for said switch, and in response to a 
detection of said further second virtual private 
number originating from said second input, a 
further second control signal destined for said 
switch, and in response to a detection of sakJ 
further first virtual private number originating 
from said second input, a third control signal 
destined for said switch, and in response to a 
detection of said further second virtual private 
number originating from said first input a fourth 
control signal destined for said switch, with said 
first control signal and said second control sig- 
nal defining the same destination, and with said 
further first control signal and said further sec- 
ond control signal and said third control signal 
and said fourth control signal being mutually 
different. 

Processor means for controlling a switch for making 
connections between origins and destinations for 
provkiing virtual private networks in a telecommuni- 
cation system as claimed in claims 1. 2, 3 or 4, 
which processor means 

• in response to a first virtual private number 
belonging to a first virtual private network, con- 
trolls said switch for coupling a first origin to a 
first destination, and 

- in response to a further first virtual private 
number belonging to said first virtual private 
network, controls said switch for coupling said 
first origin to a further first destination, 
in response to a second virtual private number 
belonging to a second virtual private network. 
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controls said switch forjMoling a second ori- 
gin to a second destinal^^Emd 

- in response to a further second virtual private 
number belonging to said second virtual pri- 
vate network, controlls said switch for coupling s 
said second origin to a further second destina- 
tion. 

characterised in that the first destination and 
the second destination are the same, and that 
the further first destination and the further sec- 10 
ond destination are different. 

6. Processor means as claimed in claim 5, character- 
ised in that in response to said further second vir- 
tual private number originating from said first origin is 
there is no coupling of said first origin to said further 
second destination and in response to said further 
first virtual private number originating from said 
second origin there is no coupling of said second 
origin to said further first destination. 20 

7. Processor means as claimed in claim 5 or 6, char- 
acterised in that said switch comprises 

- a first input connectable to said first origin for 25 
receiving said first virtual private ruimber 
belonging to said first virtual private networic. in 
response to which said switch couples said first 

input to a first output connectable to said first 9. 
destination, and for receiving said further first 30 
virtual private number belonging to said first 
virtual private networlc, in response to which 
said switch couples said first input to a further 
first output connectable to said further first des- 
tination, and ^ 
a second input connectable to said second ori- 
gin for receiving said second virtual private 
number belonging to said second virtual pri- 
vate network, in response to which said switch 
couples said second input to a second output 40 
connectable to said second destination, and for 
receiving said further second virtual private 
number belonging to said second virtual pri- 
vate network, in response to which said switch 
couples said second input to a further second 4s 
output connectable to said further second des- 
tination. 

8. Processor means as claimed in claim 7. character- 
ised in that said processor means comprise so 

- detection means coupled to said first input and 
to said second input for detecting said first vir- 
tual private number and said further first virtual 
private number and said second virtual private ss 
number and said further second virtual private 
number, and 1< 

- generation means coupled to said detection 



means anc^o said switch for generating, in 
response t^^etection of said first virtual pri- 
vate numbe^riginating from said first input, a 
first control signal destined for said switch, and 
in response to a detection of said further first 
virtueil private number originating from said first 
input, a further first control signal destined for 
sakJ switch, arxi in response to a detection of 
said second virtual private nunnber originating 
from said second input, a second control signal 
destined for said switch, and in response to a 
detection of said further second virtual private 
nuni)er originating from said second input, a 
further second control signal destined for said 
switch, and in response to a detection of said 
further first virtual private number originating 
from said second input, a third control signal 
destined for said switch, and in response to a 
detection of said further second virtual private 
number originating from said first input, a fourth 
control signal destined for said switoh. with said 
first control signal and said second control sig- 
nal defining the same destination, and with said 
further first control signal and said further sec- 
ond control signal and said third control signal 
and said fourth control signal being mutually 
different. 

Method for making connections between origins 
and destinations via a switoh in a telecommunica- 
tion system for providing virtual private networks 
and comprising said switch, which method com- 
prises the steps of 

- in response to a first virtual private number 
belonging to a first virtual private network, con- 
trolling said switch for coupling a first origin to a 
f irst destination, and 

- in response to a further first virtual private 
number belonging to said first virtual private 
network, controlling said switch for coupling 
said first origin to a further first destination. 

- in response to a second virtual private number 
belonging to a second virtual private network, 
controlling said switoh for coupling a second 
origin to a second destination, and 

- in response to a further second virtual private 
number belonging to said second virtual pri- 
vate network, controlling said switch for cou- 
pling said second origin to a further second 
destination, 

characterised in that the first destination and 
the second destination are the same, and that 
the further first destination and the further sec- 
ond destination are different 

I. Method as claimed in claim 9. characterised in that 
in response to said further second virtual private 
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number originating from said fii||^gin there is no 
coupling of said first origin to ^Pfurther second 
destination and in response to said further first vir- 
tual private number originating from said second 
origin there is no coupling of said second origin to $ 
said further first destination. 
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